|
|
@ -1,4 +1,4 @@ |
|
|
|
# $OpenBSD: bgpd.conf,v 1.11 2018/08/28 17:52:16 job Exp $ |
|
|
|
# $OpenBSD: bgpd.conf,v 1.12 2018/09/08 08:00:21 claudio Exp $ |
|
|
|
# example bgpd configuration file, see bgpd.conf(5) |
|
|
|
|
|
|
|
# define our own ASN as a macro |
|
|
@ -96,18 +96,18 @@ match from any community GRACEFUL_SHUTDOWN set { localpref 0 } |
|
|
|
# See http://bgpfilterguide.nlnog.net/guides/bogon_prefixes/ for |
|
|
|
# an elaboration why each prefix is a bogon |
|
|
|
prefix-set bogons { \ |
|
|
|
0.0.0.0/8 or-longer, 10.0.0.0/8 or-longer, \ |
|
|
|
100.64.0.0/10 or-longer, 127.0.0.0/8 or-longer, \ |
|
|
|
169.254.0.0/16 or-longer, 172.16.0.0/12 or-longer, \ |
|
|
|
192.0.2.0/24 or-longer, 192.88.99.0/24 or-longer, \ |
|
|
|
192.168.0.0/16 or-longer, 198.18.0.0/15 or-longer, \ |
|
|
|
198.51.100.0/24 or-longer, 203.0.113.0/24 or-longer, \ |
|
|
|
224.0.0.0/4 or-longer, 240.0.0.0/4 or-longer, \ |
|
|
|
::/8 or-longer, 0100::/64 or-longer, \ |
|
|
|
2001:2::/48 or-longer, 2001:10::/28 or-longer, \ |
|
|
|
2001:db8::/32 or-longer, 2002::/16 or-longer, \ |
|
|
|
3ffe::/16 or-longer, fc00::/7 or-longer, \ |
|
|
|
fe80::/10 or-longer, fec0::/10 or-longer, \ |
|
|
|
0.0.0.0/8 or-longer 10.0.0.0/8 or-longer \ |
|
|
|
100.64.0.0/10 or-longer 127.0.0.0/8 or-longer \ |
|
|
|
169.254.0.0/16 or-longer 172.16.0.0/12 or-longer \ |
|
|
|
192.0.2.0/24 or-longer 192.88.99.0/24 or-longer \ |
|
|
|
192.168.0.0/16 or-longer 198.18.0.0/15 or-longer \ |
|
|
|
198.51.100.0/24 or-longer 203.0.113.0/24 or-longer \ |
|
|
|
224.0.0.0/4 or-longer 240.0.0.0/4 or-longer \ |
|
|
|
::/8 or-longer 0100::/64 or-longer \ |
|
|
|
2001:2::/48 or-longer 2001:10::/28 or-longer \ |
|
|
|
2001:db8::/32 or-longer 2002::/16 or-longer \ |
|
|
|
3ffe::/16 or-longer fc00::/7 or-longer \ |
|
|
|
fe80::/10 or-longer fec0::/10 or-longer \ |
|
|
|
ff00::/8 or-longer \ |
|
|
|
} |
|
|
|
# use above prefix-set to reject the bogons |
|
|
|